Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
File: vKOYyNMoLIjZ09AComTkKOa67DY.mft (raw, json)
Hash identifier: kuaYJjySz5KkQR4r7k0GAdcH48FIw+TiJxgIhPCoSIA=
Subject key identifier: E2:2D:B1:CD:A1:93:DF:E6:0D:7F:9E:2C:5C:90:2F:1B:EE:21:A3:B1
Authority key identifier: BC:A3:98:C8:D3:28:2C:88:D9:D3:D0:02:A2:64:E4:28:E6:BA:EC:36
Certificate issuer: /CN=bca398c8d3282c88d9d3d002a264e428e6baec36
Certificate serial: 01A0F1550AE961BB4AC69604319C09394A8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
Manifest number: 0CC6
Signing time: Wed 30 Sep 2026 08:01:17 +0000
Manifest this update: Wed 30 Sep 2026 08:01:17 +0000
Manifest next update: Thu 01 Oct 2026 08:01:17 +0000
Files and hashes: 1: C5p8LM7HmRcfUID1rsbb3yCqZtk.roa (hash: docDKAD/tU7EQOVt4NBDcZtyV88C08WONikM1eM5KUQ=)
2: vKOYyNMoLIjZ09AComTkKOa67DY.crl (hash: 32Tlspo8lcCExT3YTPF48VhjnnJgmkMprZzcSJsDBRc=)
3: zOF_OQ5_cexcvcn-Xy9l4x73efY.asa (hash: No7O/rKN65Nv88He0q0MUpGtQzpjCDUVQmGT5pS0peg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:55:0a:e9:61:bb:4a:c6:96:04:31:9c:09:39:4a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca398c8d3282c88d9d3d002a264e428e6baec36
Validity
Not Before: Sep 30 08:01:17 2026 GMT
Not After : Oct 1 08:01:17 2026 GMT
Subject: CN=e22db1cda193dfe60d7f9e2c5c902f1bee21a3b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ce:f0:c1:1c:73:18:06:4a:3a:0e:22:a8:44:
3c:b7:db:89:f6:76:25:0b:08:7c:a2:9c:63:ed:87:
f8:cc:d2:6a:c2:5b:a6:32:81:86:e4:3d:8b:a9:79:
61:ca:41:54:b8:c7:4e:1f:9d:c3:f3:dc:82:c9:46:
e9:06:6a:61:a6:c9:82:f8:f7:77:9b:b0:ce:ba:17:
bc:8e:eb:9b:05:dc:94:cf:70:d3:c0:1b:b4:d1:23:
ef:0e:22:78:bf:5a:51:df:e6:4d:f8:c2:a8:4c:da:
70:e3:67:cc:a4:ff:14:55:e1:1c:17:86:32:de:a1:
3f:6e:0b:0c:1d:96:15:d3:9c:83:55:1c:28:33:09:
91:fd:ba:81:9c:d3:e9:8b:0d:22:48:67:c6:a0:bd:
20:ff:f6:89:20:62:80:e1:eb:ef:5d:1d:d5:e9:70:
68:fe:cd:fc:31:54:39:bc:06:47:2c:eb:16:01:ff:
2f:1c:79:17:77:c7:58:82:21:fd:1f:df:98:06:92:
85:73:c1:83:aa:17:df:1c:51:b4:df:f2:f3:1d:25:
0b:d5:51:b3:db:17:b5:ba:c8:b8:e1:ca:fa:46:ae:
d3:75:c1:54:ab:73:e8:9b:2b:4f:ee:6e:fa:68:b8:
a7:85:15:a8:7f:7d:85:6a:0d:a2:f6:ae:10:22:35:
5e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2D:B1:CD:A1:93:DF:E6:0D:7F:9E:2C:5C:90:2F:1B:EE:21:A3:B1
X509v3 Authority Key Identifier:
keyid:BC:A3:98:C8:D3:28:2C:88:D9:D3:D0:02:A2:64:E4:28:E6:BA:EC:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:48:ff:2a:96:ea:2b:44:fd:48:7f:42:e3:a2:75:ee:e4:f6:
fb:cd:25:f5:48:0b:28:a9:09:1f:9d:1c:81:9e:5e:5f:94:4d:
fc:f7:10:86:10:5b:69:c2:66:d4:e4:34:53:e3:5d:73:08:9f:
28:24:da:e1:ef:2c:ac:8e:95:ee:4d:03:60:5c:bc:a6:80:82:
bf:9a:77:b2:0d:9c:9d:2b:47:59:3d:28:4f:f0:32:34:e1:40:
08:28:6a:bd:4e:2f:b6:3d:8d:88:ae:c5:bf:8c:68:a3:a2:d4:
a4:c6:12:b6:a5:c7:bd:94:ea:bb:57:b0:0c:23:46:3a:f0:3e:
6d:5d:fb:82:2d:5f:a1:91:4d:6e:9a:0a:c3:18:a6:1a:c3:21:
45:d8:95:86:9f:8e:93:e6:ac:e0:04:bd:be:a7:ea:1d:0c:71:
0e:4f:84:d5:e1:f7:14:82:c0:99:aa:9f:0a:c3:15:76:62:0e:
f3:af:e9:af:18:b4:a5:eb:b6:78:14:66:ba:d0:53:78:78:f1:
33:71:cc:25:5c:a4:c0:35:ea:be:97:27:2c:c8:23:b4:cd:bc:
22:90:78:c8:74:d3:1e:43:9d:7e:23:99:63:58:c4:5f:5f:47:
df:bb:ef:89:f2:04:77:7c:dc:5b:57:db:f8:32:68:d6:8d:f1:
50:33:eb:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 17:09:47 2026 by rpki-client